What is claimed is: 

1 . A method for preventing access to a sharedperipheral device by a processor-based node in 
a multinode system, including the steps of:/ 

(1) storing at the peripheral dev#e a first unique value representing a first configuration of 
the multinode system; >^ 

(2) sending an access^quest from the node to the device, the request including a second 
unique value representing^ second configuration of the multi-node system; 

(3) detenninkrg whether said first and second values are identical; and 

(4) if the first and second values are identical, then executing the access request at the 
peripheral device. 

2. The method of claim 1, wherein: 

said first value is generated utilizing at least in part information relating to a first time 
when the multinode system was in said first configuration; and 

said second value is generated utilizing at least in part information relating to a second 
time when the multinode system was in said second configuration. 

3. The method of claim 2, wherein: 

step 3 includes the step of determining whether said first and second times are identical. 

4. The method of claim 1, wherein said first and second values are generated based at least in 
part on epoch numbers generated by a membership protocol executing on said multinode system. 

5. The method of claim 4, wherein each of said first and second values is generated based at 
least in part on respective membership sets of said multinode system generated by said member- 
ship protocoL 

6. The method of claim 1, wherein each of said first and second values is generated based at 
least in part on respective membership sets of said multinode system generated by said member- 
ship protocoL 
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7. An apparatus for preventing access to at least one shared peripheral resource by a proces- 
sor-based node in a multinode system, the resource being coupled to the system by a resource 
controller including a controller memory, each of a plurality of nodes on the system including a 
processor coupled to a node memory storing program modules configured to executing functions 
of the invention, the apparatus including: 

a membership monitor module configured to determine a membership list of the nodes, 
including said resource, on the system at predetermined times, including at least at a time when 
the membership of the system changes; 

a resource manager module configured to determine when the resource is in a failed state 
and for communicating the failure of the resource to said membership monitor to indicate to the 
membership monitor to generate a new membership list; 

a configuration value module configured to generate a unique value based upon said new 
membership list and to store said unique value locally at each node on the system; and 

an access control module stored at said controller memory configured to block access r 
requests by at least one said requesting node to said resource when the locally stored unique value 
at said requesting node does not equal the unique value stored at said resource controller. 

8. The apparatus of claim 7, wherein said configuration value monitor module is configured 
to determine said unique value based at least in part upon a time stamp indicating the time at 
which the corresponding membership list was generated. 

9. The apparatus of claim 7, wherein said unique value is based at least in part upon an epoch 
number generated by a membership protocol module. 

10. The apparatus of claim 7, wherein said membership monitor module is configured to exe- 
cute independently of any action by said shared resource when said shared resource is in a failed 
state. 

1 1 . The apparatus of claim 7, wherein said resource manager module is configured to execute 
Independently of any action by said shared resource when said shared resource is in a failed state. 

-14- 



12. The apparatus of claim 7, wherein said configuration module is configured to execute 
independently of any action by said shared resource when said shared resource is in a failed state. 

13. The apparatus of claim 7, wherein said access control module is configured to execute 
independently of any action by said shared resource when said shared resource is in a failed state. 
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